$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: LgQzU4L2BefNtxElvVp47wikD5BVoOgffsXt9MmqqpY= Subject key identifier: 8C:7A:BC:66:A7:1F:0B:21:22:8B:C8:72:BF:FA:DE:F7:23:9E:9D:5E Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: 6A Signing time: Sat 19 Jul 2025 07:10:38 +0000 Manifest this update: Sat 19 Jul 2025 07:10:37 +0000 Manifest next update: Sat 26 Jul 2025 07:10:37 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: C5Vn7+uY03LM7ugWYqaYzL4B+CuOrLzdIG1Ww75brks=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: Jul 19 07:10:37 2025 GMT Not After : Jul 26 07:10:37 2025 GMT Subject: CN=687b44ee-332d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:c0:5a:dd:07:30:59:28:42:15:95:fb:db: ff:9c:fa:9f:74:46:ce:ef:71:0b:84:c2:d6:1c:b3: bf:14:ba:13:d5:aa:3f:c2:a2:8d:09:c9:39:00:95: 81:52:e8:72:0e:40:63:ce:81:2d:a8:71:5d:64:5f: a3:2b:69:ef:7f:85:28:d5:a7:0b:ee:66:68:4a:ad: f2:58:e6:64:3b:52:ad:cd:bf:b1:72:38:91:ba:69: 0b:cb:28:6b:dd:5d:0e:d9:ac:b5:62:9a:27:27:cd: 03:b4:92:16:db:6e:ae:8e:f7:45:fa:84:83:38:98: 5c:eb:65:2c:ce:27:47:1a:95:b1:c8:51:da:64:d0: 6c:9f:de:81:2c:3a:7d:74:e9:80:8c:db:d8:be:a6: 19:81:b7:0f:62:6b:e0:8d:35:7f:9f:02:55:1f:ce: ca:22:4d:69:e3:e7:d7:85:0e:d4:9e:53:a8:19:1c: c8:b7:f0:fa:29:e6:c8:34:12:de:09:19:55:a1:7d: ac:8e:0a:de:e9:86:40:19:30:67:ee:80:32:44:05: f7:60:5e:cf:71:32:ca:27:6d:5c:85:83:73:af:b6: 79:64:59:59:22:80:c6:03:03:5b:8e:fb:7c:67:64: 98:39:dc:96:67:68:2f:4f:61:76:97:89:dc:e4:34: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:BC:66:A7:1F:0B:21:22:8B:C8:72:BF:FA:DE:F7:23:9E:9D:5E X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bc:71:43:14:7a:a1:ea:13:81:a9:ab:5b:db:a5:b7:e9:d0: 25:5d:ab:d3:48:05:fd:f8:db:7e:f4:c0:a0:cf:e3:4d:07:76: 4e:c8:78:d7:c9:73:7e:9b:a7:a7:25:5c:10:43:5b:d3:91:70: 46:a9:48:39:25:95:ae:b5:18:9f:30:b8:6c:56:37:f4:66:10: 2a:01:ad:1f:c2:69:ef:f3:2a:d1:b0:99:d1:54:99:23:fa:95: d3:21:2c:6e:fe:ea:b5:01:37:68:2e:5a:a8:9c:c8:3c:a0:d2: 25:94:c0:d3:1c:4d:8f:a4:1f:8d:ac:03:c1:85:46:40:07:85: 0e:f8:2e:72:e5:76:1d:36:74:9d:18:de:cc:2b:cb:08:b2:85: 4f:bd:60:e3:d7:9b:37:ca:11:78:e6:7f:f2:36:5a:df:06:20: a3:cb:a0:89:1e:af:11:a1:05:39:80:3c:72:06:6b:d3:cc:a8: d5:84:2c:1f:39:07:3d:34:99:4e:0f:f2:0a:57:f9:36:47:93: 9b:26:09:b1:28:1b:21:c2:1c:b5:dd:6e:08:93:9c:22:bb:1b: 37:eb:f6:f1:16:5e:e4:de:86:c2:58:70:d7:64:c1:ca:f9:f1: 2f:19:a5:d3:02:8e:44:f5:cd:b2:6e:7d:7e:5a:46:5c:a9:62: 69:6e:4b:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoMkQyMjNCNTZFRDREMTdBODE3OEZFOUZDNjNFMzgwMUE5 M0I1QTFEMzAeFw0yNTA3MTkwNzEwMzdaFw0yNTA3MjYwNzEwMzdaMBgxFjAUBgNV BAMTDTY4N2I0NGVlLTMzMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqwsBa3QcwWShCFZX72/+c+p90Rs7vcQuEwtYcs78UuhPVqj/Coo0JyTkAlYFS 6HIOQGPOgS2ocV1kX6Mrae9/hSjVpwvuZmhKrfJY5mQ7Uq3Nv7FyOJG6aQvLKGvd XQ7ZrLVimicnzQO0khbbbq6O90X6hIM4mFzrZSzOJ0calbHIUdpk0Gyf3oEsOn10 6YCM29i+phmBtw9ia+CNNX+fAlUfzsoiTWnj59eFDtSeU6gZHMi38Pop5sg0Et4J GVWhfayOCt7phkAZMGfugDJEBfdgXs9xMsonbVyFg3OvtnlkWVkigMYDA1uO+3xn ZJg53JZnaC9PYXaXidzkNMZ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjHq8Zqcf CyEii8hyv/re9yOenV4wHwYDVR0jBBgwFoAULSI7Vu1NF6gXj+n8Y+OAGpO1odMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0FDQjA2ODVFQzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9k TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFNJN1Z1MU5GNmdYai1uOFktT0FHcE8xb2RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0FDQjA2ODVFQzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZn WGotbjhZLU9BR3BPMW9kTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEq8cUMUeqHqE4Gpq1vbpbfp0CVdq9NIBf342370wKDP400Hdk7IeNfJ c36bp6clXBBDW9ORcEapSDklla61GJ8wuGxWN/RmECoBrR/Cae/zKtGwmdFUmSP6 ldMhLG7+6rUBN2guWqicyDyg0iWUwNMcTY+kH42sA8GFRkAHhQ74LnLldh02dJ0Y 3swrywiyhU+9YOPXmzfKEXjmf/I2Wt8GIKPLoIkerxGhBTmAPHIGa9PMqNWELB85 Bz00mU4P8gpX+TZHk5smCbEoGyHCHLXdbgiTnCK7Gzfr9vEWXuTehsJYcNdkwcr5 8S8ZpdMCjkT1zbJufX5aRlypYmluS/I= -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:52 2025 by rpki-client